Exploit.T1003CredentialAccess

Short bio

Exploit.T1003CredentialAccess is Malwarebytes’ detection name for malicious attempts to access credential material stored in process memory.

Technique

Exploit.T1003CredentialAccess monitors, detects, and blocks attempts to access credential material stored in process memory. T1003 is a reference to the Mitre Att&ck technique OS Credential Dumping: Adversaries may attempt to dump credentials to obtain account login and credential material, normally in the form of a hash or a clear text password, from the operating system and software. Credentials can then be used to perform lateral movement and access restricted information.

Protection

Malwarebytes protects your system(s) by detecting attempts to access credential material stored in process memory and displays the message T1003 – Credential Access